Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa
File:                     535ae84c-c11d-3b56-a148-7f42528ad5ff.roa (raw, json)
Hash identifier:          TIlveikBYcGxRWWKFCaku68FjIIZ/T0InJr3J4tkd+8=
Subject key identifier:   A7:96:ED:7E:DB:6A:45:07:C9:CD:5E:B2:FD:AA:25:59:74:6D:40:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4E8C0BA3C23CF1DAFE180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     19527
IP address blocks:        34.4.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e8:c0:ba:3c:23:cf:1d:af:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=6c2ada48-568e-40fe-a4e6-32dcc7371457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:15:4b:44:bc:ab:a2:8e:a3:00:be:d9:57:
                    da:a3:0d:07:5e:e4:f9:84:c8:68:bd:4c:f6:70:d5:
                    f6:70:88:ea:3c:58:d9:80:41:99:4c:68:27:b1:25:
                    8c:b7:45:01:96:be:51:9d:2e:b0:14:c8:8a:e5:eb:
                    af:c5:67:ee:0f:46:83:9e:cd:50:ec:07:5c:13:1d:
                    c0:60:e5:4a:fc:7e:9c:3a:93:15:f7:90:4d:f2:af:
                    35:a6:61:95:98:65:bf:cd:e8:2d:e2:4c:bc:fe:84:
                    1e:d7:7d:67:83:f9:06:b7:e2:a8:45:fc:f4:cd:ff:
                    b7:9c:ae:13:80:aa:66:27:9f:13:a1:03:fb:79:d1:
                    5b:69:4b:fd:64:e2:cf:6b:03:a2:4a:47:fc:77:71:
                    b6:e7:92:25:d2:c9:8c:e7:d0:79:ed:6b:94:36:b7:
                    df:3a:55:3e:d7:63:c7:fe:10:96:17:c3:4c:0e:8b:
                    db:e2:88:7a:10:b0:b0:ff:23:42:cc:cf:43:af:ca:
                    12:82:85:c3:d2:83:12:8f:90:c9:9b:ce:5b:82:79:
                    e1:32:70:db:32:0c:f8:0b:04:dc:25:7c:65:a8:8f:
                    8a:15:1e:2d:e4:65:c2:9b:50:ad:27:c9:5e:96:1f:
                    97:55:8e:6a:b5:f7:7f:a0:c5:c6:c4:3e:0a:31:c1:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:96:ED:7E:DB:6A:45:07:C9:CD:5E:B2:FD:AA:25:59:74:6D:40:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.4.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:83:11:ec:70:72:a5:b6:82:fe:76:c5:62:c5:8a:50:ef:
         27:85:f6:f8:33:62:53:2a:88:e1:d0:30:1d:bb:b3:18:cc:2c:
         e5:66:2c:ae:fe:f3:3d:73:97:f8:cd:0e:d8:db:8c:f2:23:90:
         29:4a:1f:49:eb:19:f9:ef:6a:47:1b:5f:dc:81:2f:91:83:d2:
         d1:cd:03:fa:a4:1c:8d:86:f3:bb:38:46:4b:85:34:05:6f:d5:
         22:79:25:5e:bc:b5:7d:5c:50:93:66:b8:c0:0b:20:3a:9d:63:
         d0:f0:f7:da:34:a8:07:14:c8:b2:39:5a:9f:ff:cb:3c:3a:76:
         af:63:68:5e:9c:8e:2e:7e:1b:2d:24:e1:f5:0b:d0:52:c3:c9:
         3b:72:18:74:8b:db:56:10:6c:81:e3:85:57:8e:7e:e9:97:fe:
         6b:49:d0:ca:1f:10:81:70:fa:86:db:ca:b2:97:e3:38:e1:d3:
         4e:c5:cf:9d:c4:fd:5c:79:6b:82:ea:07:45:a3:c1:56:0e:dc:
         6b:9a:b1:6f:bb:3e:3f:74:89:df:c4:d8:ec:79:19:b2:59:a1:
         c1:4c:bb:05:f5:ae:22:c7:51:da:c2:fd:2f:38:4e:95:9e:d7:
         63:fb:6a:31:b4:7b:0d:a6:67:bc:db:11:84:34:4d:19:c8:9c:
         92:3a:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:47 2024 by rpki-client on console-ams.rpki-client.org